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Abstract — Fuzzy discrete event systems as a generalization of 
(crisp) discrete event systems have been introduced in order that 
it is possible to effectively represent uncertainty, imprecision, and 
vagueness arising from the dynamic of systems. A fuzzy discrete 
event system has been modelled by a fuzzy automaton; its behav- 
ior is described in terms of the fuzzy language generated by the 
automaton. In this paper, we are concerned with the supervisory 
control problem for fuzzy discrete event systems with partial 
observation. Observability, normality, and co-observability of 
crisp languages are extended to fuzzy languages. It is shown 
that the observability, together with controllability, of the desired 
fuzzy language is a necessary and sufficient condition for the 
existence of a partially observable fuzzy supervisor. When a 
decentralized solution is desired, it is proved that there exist 
local fuzzy supervisors if and only if the fuzzy language to 
be synthesized is controllable and co-observable. Moreover, the 
infimal controllable and observable fuzzy superlanguage, and 
the supremal controllable and normal fuzzy sublanguage are 
also discussed. Simple examples are provided to illustrate the 
theoretical development. 

Index Terms — Fuzzy discrete event systems, supervisory con- 
trol, observability, normality, co-observability. 



I. Introduction 

DISCRETE event systems (DES) are systems whose state 
space is discrete and whose state can only change as 
a result of asynchronously occurring instantaneous events 
over time. Such systems have been successfully applied to 
provide a formal treatment of many man-made systems such 
as communication systems, networked systems, manufacturing 
systems, and automated traffic systems. The behavior of a DES 
is described in terms of the sequences of events involved. Su- 
pervisory control of DES pioneered by Ramadge and Wonham 
[19] and subsequently extended by many other researchers 
(see, for example, [20], [2], and the bibliographies therein) 
provides a framework for designing supervisors for controlling 
the behavior of DES. 

Usually, a DES is described by finite state automaton with 
events as input alphabets, and the behavior is thus the language 
accepted by the automaton. It is worth noting that such a model 
can only process crisp state transitions. In other words, no 
uncertainty arises in the state transitions of the model. There 
are, however, many situations such as mobile robots in an 
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unstructured environment [14], intelligent vehicle control [21], 
and wastewater treatment [24], in which the state transitions 
of some systems are always somewhat imprecise, uncertain, 
and vague. A convincing example given in [12] and [13] is 
a patient's condition, where the change of the condition from 
a state, say "excellent", to another, say "fair", is obviously 
imprecise, since it is hard to measure exactly the change. 

Vagueness, imprecision, and uncertainty are typical features 
of most of the complex systems. It is well known that the 
methodology of fuzzy sets first proposed by Zadeh [27] is a 
good tool for coping with imprecision, uncertainty, and vague- 
ness. To capture significant uncertainty appearing in states and 
state transitions of DES, Lin and Ying have incorporated fuzzy 
set theory together with DES and thus have extended crisp 
DES to fuzzy DES by applying fuzzy finite automaton model 
[12], [13]. Under the framework of fuzzy DES, Lin and Ying 
have discussed state-based observability and some optimal 
control problems. Excitingly, the first application of fuzzy DES 
has recently been reported by Ying et al. in [25], where fuzzy 
DES are used to handle treatment planning for HIV/AIDS 
patients. It is worth noting that fuzzy finite automata and fuzzy 
languages have some important applications to many other 
fields such as clinical monitoring and pattern recognition (see, 
for example, [15]). 

As a continuation of the works [12] and [13], we have 
developed supervisory control theory for fuzzy DES modelled 
by (maxmin) fuzzy automata in [1]. The behavior of such 
systems is described by their generated fuzzy languages. 
Informally, a fuzzy language consists of certain event strings 
associated with membership grade. The membership grade 
of a string can be interpreted as the possibility degree to 
which the system in its initial state and with the occurrence of 
events in the string may enter another state. Although strings 
in a probabilistic language [16], [5], [8] are also endowed 
with weight, it should be pointed out that fuzzy languages 
are different from probabilistic languages in semantics: the 
weight in a fuzzy context describes the membership grade 
(namely, uncertainty) of a string, while the weight of a string 
in a probabilistic context reflects a frequency of occurrence. 
This difference appeals for distinct control action and can also 
satisfy diverse applications. 

For control purposes, the set of events is partitioned into 
two disjoint subsets of controllable and uncontrollable events, 
as usually done in crisp DES. Control is exercised by a 
fuzzy supervisor that disables controllable events with certain 
degrees in the controlled system, also called a plant, so that 
the closed-loop system of supervisor and plant exhibits a 
pre-specified desired fuzzy language. The controllability of 
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fuzzy languages has been introduced in [1] as a necessary 
and sufficient condition for the existence of a fuzzy supervisor 
that achieves a desired specification for a given fuzzy DES. A 
similar controllability condition based on different underlying 
constituents of fuzzy automata and uncontrollable event set 
has also been given independently by Qiu in [18]. 

In [1] and [18], both Qiu and we have restricted our attention 
to the problem of centralized control under full observation. 
There are, however, some systems in which supervisors cannot 
"see" or "observe" all the events. For example, in a diagnosis 
on a disease, if we regard the evolvement of the disease as 
a system with some physicians as supervisors, it is a fact 
that the physicians cannot see all the events that result in the 
evolvement of the disease. Unobservability of events arises 
principally from the limitations of the sensors attached to the 
systems and the distributed nature of some systems such as 
manufacturing systems and communication networks where 
events at some locations are not seen at other locations. For 
crisp DES, the issue of partial observation has been extensively 
studied in both centralized and decentralized control (see, for 
example, [3], [9]-[l 1], [22]). However, in terms of fuzzy DES, 
this issue is investigated only as a global property of systems 
in [12], [13]; a further study is desired. 

The purpose of this paper is to develop these earlier works 
[1], [12], [13], [18] and address the supervisory control 
problem for fuzzy DES with partial observation. This requires 
that we have to deal with the presence of unobservable events 
in addition to the presence of uncontrollable events. We 
are mainly concerned with what controlled behavior can be 
achieved when controlling a fuzzy DES with a partially ob- 
servable fuzzy supervisor and decentralized fuzzy supervisors, 
respectively. 

The contribution of this paper is as follows. 

1) . To characterize the class of fuzzy languages achievable 
under the partially observable architecture, in Section III we 
introduce the notions of observability and strong observability 
of fuzzy languages which are generalized versions of ob- 
servability of crisp languages. We show that there exists a 
partially observable fuzzy supervisor synthesizing a desired 
fuzzy language if and only if the fuzzy language is controllable 
and observable. The property that observable fuzzy languages 
are closed under arbitrary intersections leads to the existence 
of infimal controllable and observable fuzzy superlanguage. 

2) . Decentralized supervisory control with global specifi- 
cation has been investigated in Section IV. By generalizing 
co-observability of crisp languages to fuzzy languages, a 
necessary and sufficient condition for the existence of local 
fuzzy supervisors that achieve a given legal fuzzy language is 
derived. 

3) . In order to obtain an approximation for a given fuzzy 
language by using controllable and observable sublanguages, 
normality of fuzzy languages which is stronger than observ- 
ability is defined in Appendix I. Some properties of normal 
fuzzy languages and the relation between normality, observ- 
ability, and controllability are also presented. 

Besides the sections mentioned above, Section II provides 
the necessary preliminaries; Section V addresses an illustrative 
example; Section VI concludes the work presented and iden- 



tifies some future research directions. The paper also contains 
two appendices: Appendix I is devoted to the normality 
of fuzzy languages and Appendix II shows the proofs of 
theorems, propositions, and lemmas. 

II. Preliminaries 

In the first subsection, we will briefly recall a few basic 
facts on the supervisory control of crisp DES under partial 
observation. For a detailed introduction to the supervisory 
control theory, readers may refer to [2]. The second subsection 
is devoted to the background on the supervisory control of 
fuzzy DES. 

A. Observability and Decentralized Control of Crisp DES 

Let E denote the finite set of events, and E* denote the set 
of all finite sequences of events, or stings, in E, including the 
empty string e. A string [i G E* is a prefix of a string lu G E* 
if there exists v G E* such that [lv = oj. In this case, we 
write yu < u. The length of a string u> is denoted by \co\. Any 
subset of E* is called a language over E. The prefix closure 
of a language L, denoted by L, consists of the set of strings 
which are prefixes of strings in L. A language L is said to be 
prefix closed if L = L. 

A crisp DES, or plant, is usually described by a determin- 
istic automaton: G = (Q, E, S, qo), where Q is a set of states 
with the initial state q n , E is a set of events, and 6 : QxE — > Q 
is a (partial) transition function. The function 5 is extended to 
8 : Q x E* — > Q in the obvious way. In a logical model of a 
DES, we are interested in the strings of events that the system 
can generate. Thus the behavior of a DES is modelled as a 
prefix closed language L(G) = {s G E* : 5(qo, s) is defined} 
over the event set E. 

Recall that associated with the system is a set E c of events 
that can be disabled, and there is a set of events, E Q , that 
can be observed by partial observation supervisors. The sets 
of uncontrollable and unobservable events are denoted by 
E uc = E\E C and E uo — E\E„, respectively. To represent 
the fact that a partial observation supervisor has only a 
partial observation of strings in L(G), a natural projection 
operator P : E* — > E* is used. Recall that P(e) — e and 
P(sa) = P(s)P(a) for any s G E* and a G E, where 
P{a) = a if a G E Q , and otherwise P(a) = e. A (partial 
observation) supervisor is a map Sp : P[L{G)\ — > 2 E such 
that S P [P(s)} D E uc for any s G L(G). 

The language generated by the controlled system, denoted 
by L(Sp/G), is defined inductively as follows: 

1) e G L(S P /G); 

2) [s G L(S P /G), sa G L(G), and a G Sp[P(s)]] [sa G 
L(S P /G)}. 

Let us recall two key notions in crisp DES. 

Definition 1: A prefix-closed language K C L(G) is said 
to be controllable [19] (with respect to L(G) and E uc ) if 
KE UC n L(G) C K; it is called observable [9] (with respect 
to L(G), P, and E c ) if for any s,s' G K and any a G E c , 

[P(s) = P(s'), sa G K, and s'a G L{G)\ => [s'a G K]. 
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Given a nonempty and prefix-closed language K C L(G), 
it has been shown in [3] and [9] that there exists a partial 
observation supervisor Sp such that L(Sp/G) = K if and 
only if K is controllable and observable. 

If the plant G is physically distributed, then it is desirable 
to have decentralized supervisors, where each supervisor is 
able to control a certain set of events and is able to observe 
certain other events. For the sake of simplicity, let us recall 
the decentralized supervisory control with only two local 
supervisors. 

Let E ic ,E io C E, i = 1,2, be the local controllable and 
observable event sets, respectively. Let P t : E* — > E* a be the 
corresponding natural projection. The local supervisor Sip (or 
simply Si), i = 1, 2, is given by the map Si : Pi[L(G)] — ► 2 E 
that satisfies Si[Pi(s)} 3 E\E ic for any s G L(G). 

The language L(S\ A S2/G) generated by the system G 
under the joint supervision of Si and S 2 is defined inductively 
by 

1) e G L(Si A S2/G); 

2) [s G L(Si A S 2 /G), sa G L(G), and a G Si[Pi(s)] n 
^ 2 [-P 2 (s)]] => [sa e L(Si A S 2 /G)]. 

To state the existence condition for local supervisors, it 
is necessary to introduce co-observability, which is defined 
below. 

Definition 2: A prefix-closed language K C L(G) is co- 
observable [22] (with respect to L(G), Pi, and Ei C , i = 1, 2), 
if for all s, s', s" G K subject to Pi(s) = Pi(s') and P 2 (s) = 
P 2 (s"), the following hold: 

1) if a G Eic n £ 2c , sa G £(G), and s'a, s"a G X, then 
sa G K; 

2) if a G Ei c \E 2c , sa G £(£?), and s'a G K, then sa G K; 

3) if a G £ 2c \£ic, sa G L(G), and s"a G K, then sa G if. 

Given a nonempty and prefix-closed language K C L(G), 
it has been shown by Rudie and Wonham in [22] that there 
exist local supervisors Si and S 2 such that L(Si AS2/G) = K 
if and only if K is controllable and co-observable. 

B. Fuzzy DES and Its Controllability 

In this subsection, we recall the model of fuzzy DES and 
its supervisory control under full observation. 

For later need, let us first review some notions and notation 
on fuzzy set theory. Each fuzzy subset (or simply fuzzy set), 
A, is defined in terms of a relevant universal set X by a 
function assigning to each element x of X a value A{x) 
in the closed unit interval [0, 1]. Such a function is called 
a membership function, which is a generalization of the 
characteristic function associated to a crisp set; the value A{x) 
characterizes the degree of membership of x in A. 

The support of a fuzzy set A is a crisp set defined as 
supp(_4) = {x : A{x) > 0}. Whenever supp(_4) is a finite 
set, say supp(„4) = {xi,x 2 , - ■ ■ ,x n }, then fuzzy set A can 
be written in Zadeh's notation as follows: 

A= A(xi) | A(x 2 ) | | A(x n ) 
xi x 2 x n 

We denote by J-(X) the set of all fuzzy subsets of X. For 
any A, B G J~{X), we say that A is contained in B (or B 



contains A), denoted by A C B, if A(x) < B(x) for all 
x G X. We say that A = B\f and only if A C B and B C A 
A fuzzy set is said to be empfy if its membership function is 
identically zero on X. We use O to denote the empty fuzzy 
set. 

For any family Aj, i G J, of elements of [0,1], we write 
Vjg/Ai or V{Ai : i G J} for the supremum of {Aj : i 6 /}, 
and Aig/Ai or A{Aj : z G /} for its infimum. In particular, if 
I is finite, then Vie/Ai and AieiXi are the greatest element 
and the least element of {Xi : i G /}, respectively. 

Now, we are able to introduce the model of fuzzy DES. A 
fuzzy DES is modelled by a fuzzy automaton which is known 
as maxmin automaton in some mathematical literature [23], [6] 
and is somewhat different from max-product automata used in 
[12], [13]. 

Definition 3: A fuzzy automaton is a four-tuple G = 
(Q, E, S, q ), where: 

• Q is a crisp (finite or infinite) set of states; 

• E is a finite set of events; 

• Qo G Q is the initial state; 

• S is a function from Q x E x Q to [0, 1], called a fuzzy 
transition function. 

For any p, q G Q and a G E, we can interpret 5(p, a, q) as 
the possibility degree to which the automaton in state p and 
with the occurrence of event a may enter state q. Contrast to 
crisp DES, an event in fuzzy DES may take the system to 
more than one states with different degrees. The concept of 
fuzzy automata is a natural generalization of nondeterministic 
automata. The major difference between fuzzy automata and 
nondeterministic automata is: in a nondeterministic automaton, 
5(p, a, q) is either 1 or 0, so the possibility degrees of 
existing transitions are the same, but if we work with a fuzzy 
automaton, they may be different. 

An extended fuzzy transition function from Q x E* x Q 
to [0,1], denoted by the same notation 8, can be defined 
inductively as follows: 

5(p,e,q) = { J' if « =P 
,H/ \ 0, otherwise 

5(p, uja, q) = V reQ (6(p, u, r) A 5(r, a, q)) 

for all u> G E* and a G E. The possibility degrees of 
transitions here are given by the operation max rnin; this 
is the main difference between maxmin automata and max- 
product automata used in [12] and [13]. 

Further, the language C(G) generated by G, called fuzzy 
language, is defined as a fuzzy subset of E* and given by 

C(G)(u) = W qeQ S(q a ,uj,q). 

This means that a string ui of E* is not necessarily either 
"in the fuzzy language C(G)" or "not in the fuzzy language 
C(G)"; rather ui has a membership grade C(G)(u), which 
measures its degree of membership in C{G). 

If the state set of a fuzzy automaton G is empty, then it 
yields that C{G) = O, i.e., C(G)(w) = for all w G E*; 
otherwise, from the definition we see that C(G) has the 
following properties: 
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PI) £(G)(e) = l; 

P2) C{G){p) > £(G){(j,v) for any fj,,v EE*. 

Conversely, given a fuzzy language £ (over the event set 
E) satisfying the above properties, we can construct a fuzzy 
automaton G = (Qc, Ec,Sc,Qc), where Qc = supp(£), 
Ec = E, qc = e, and 

C(v), if v = fia 
0, otherwise 



for all n, v E supp(£) and a E E. There is no difficulty to 
verify that C(G) = C. Thus a fuzzy language and a fuzzy DES 
amount to the same thing in our context, which is analogous 
to the equivalence of regular expressions and finite automata 
due to Kleene [7]. 

Note that in the rest of the paper, by a fuzzy language we 
mean the empty fuzzy language O or a fuzzy language that 
satisfies the above properties PI) and P2), unless otherwise 
specified. In particular, the supports of such fuzzy languages 
are prefix closed by the property P2). We use TC to denote 
the set of all fuzzy languages over E. More explicitly, TL = 
{A G T(E*) : A = O or A satisfies PI) and P2)}. 

Union and intersection of fuzzy languages can be defined 
as follows: 

(Uj e i£j)(w) = Vj e j£j(w), for all lo G E*, and 
(n ie j£i)(w) = A ieI Ci(uj), for all lo G E*. 

It has been shown in [1] that fuzzy languages are closed 
under arbitrary unions and intersections, respectively. 

The concatenation C1C2 of two fuzzy languages C\ and 
£2, which is again a fuzzy language [1], is defined by 

(£i£ 2 )(^) = V{£i(m) A £i(y) : H,v € E* and fiv = lo}, 

for all lo G E*. 

To model the control action of fuzzy DES, we partition 
the event set E into controllable and uncontrollable events: 
E = E c iiE uc , as usually done in crisp DES. However, unlike 
controllable events in crisp DES, a controllable event in fuzzy 
DES can be disabled with any degree. 

Control is achieved by means of a fuzzy supervisor, which 
is allowed to disable any fuzzy sets of controllable events 
after having observed an arbitrary string s G supp(£(G)). 
Formally, a (fully observable) fuzzy supervisor for G is a 
map S : supp(£(G)) -> F{E) such that S(s)(a) = 1 for 
any s G supp(£(G)) and a G E uc . The controlled system is 
denoted by S/G; the behavior of S/G is the fuzzy language 
C s obtained inductively as follows: 

1) C s {e) = l- 

2) C s (sa) = C(G)(sa) A S(s)(a) A C s (s) for any s G E* 
and a G E. 

To state the controllability of fuzzy languages, let us first 
introduce a fuzzy subset £ uc of E*, which is given by 



£ uc (lo) = 



1, if uj G E uc 
0, if uj e E*\E V 



Definition 4: A fuzzy language AC C C(G) is said to be 
controllable [1] (with respect to C(G) and E uc ) if 

K£ uc n C(G) C AC, 



or equivalently, IC(sa) = K,(s) A C(G)(sa) for any s E E* 
and a G -E^. 

We remark that a similar concept, called fuzzy controllabil- 
ity condition which is the same as the above when considered 
for the same underlying constituents of fuzzy automata and 
uncontrollable event set, has been introduced independently 
by Qiu in [18]. 

It is clear that the fuzzy languages O and C(G) are always 
controllable with respect to C(G) and any E uc . A good 
property of controllable fuzzy languages is that they are closed 
under arbitrary unions and intersections, respectively [1]. Let 
AC C C(G) be a nonempty fuzzy language. It has been proved 
in [1] that there exists a (fully observable) fuzzy supervisor S 
for G such that C s = AC if and only if AC is controllable. 

III. Observability 

Up to this point it has been assumed that all of the events in 
a fuzzy DES can be directly observed by the fuzzy supervisor. 
However, in practice we usually only have local or partial 
observations. 

To model a fuzzy DES with partial observations, we bring 
an additional event set E a C E of observable events that can 
be seen by the fuzzy supervisor, and a natural projection P : 
E — > E U{e}, as usual in crisp DES. More formally, the event 
set E is partitioned into two disjoint subsets: E = E a U E uo , 
where E a and E uo denote the observable event set and the 
unobservable event set, respectively. The natural projection P 
is defined in the same way as crisp DES, that is, 



P(a) 



a, if a G E Q 
e, if a G E uo . 



The action of the projection P is extended to strings by 
defining P(e) = e, and P(sa) = P(s)P(a) for any s G 
E* and a G E. 

Due to the presence of P, the fuzzy supervisor cannot 
distinguish between two strings s and s' that have the same 
projection, namely, P(s) = P(s'). For such pairs, the fuzzy 
supervisor will necessarily issue the same control action. 
To capture this fact, we define a partially observable fuzzy 
supervisor as a map Sp : P[supp(£(G))] — > J~(E) satisfying 
S(s)(a) = 1 for any s G P[supp(£(G))] and a G E uc . This 
means that the control action may change unless an observable 
event occurs. We shall assume that the control action is 
instantaneously (i.e. before any unobservable event occurs) 
updated once an observable event occurs. The assumption is 
necessary as we may wish to update the control action for 
some of these unobservable events. 

The behavior of Sp/G when Sp is controlling G is defined 
analogously to the case of full observation. 

Definition 5: The fuzzy language C Sp generated by Sp/G 
is defined inductively as follows: 

D£ 5p (e)-i; 

2) C Sp (sa) = C(G)(sa) A S P [P(s)](a) A C Sp (s) for any 
s G E* and a G E. 

Consequently, the possibility of an event a following a string 
s under a partially observable fuzzy supervisor only depends 
on the physically possible degree of sa in the controlled 
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system, the enabled degree of a after the occurrence of P(s), 
and the physically possible degree of s in the closed-loop 
system. Clearly, C Sp C C(G) and C Sp G TC For simplicity, 
we sometimes write C for C{G). 

Before introducing the concepts of observability and strong 
observability from the view of event strings, we remark 
that based on state estimation, Lin and Ying have already 
introduced the same terms with different essence to fuzzy DES 
in [12] and [13]. They have used observability measure to 
measure the observability of a fuzzy DES, which is a good 
approach to describing the global property of the system. 
For our purpose, we need a characterization of the (strong) 
observability of fuzzy sublanguages. 

Definition 6: A fuzzy language JC C C is said to be 
observable (respectively, strongly observable) with respect to 
C, P, and E c if for all s, s' G supp(/C) with P{s) = P(s') 
and for any a G E c satisfying sa G supp(/C), we have that 
tC(s'a) = JC(s') A C(s'a) A x for some (respectively, any) 
x G {x G [0, 1] : JC(sa) = JC(s) A C(sa) A x}. 

We interpret x as the enabled degrees of controllable events 
when C is restricted to JC. For simplicity, we shall omit the 
range [0, 1] of x in the sequel. Intuitively, for observable fuzzy 
language, we require that for each controllable event, there is 
an enabled degree which can be used after seeing the two 
strings that are the same under the supervisor. 

Remark 1: The parameter E c is included in the definition 
in order for the property of observability not to overlap with 
the property of controllability. As we will see, observability 
will only be used in conjunction with controllability, and the 
latter ensures that the requirements of the definition hold for 
a G E uc . 

In what follows, (strong) observability will always be with 
respect to C, P, and E c \ controllability is with respect to C and 
E uc . We simply call JC (strongly) observable or controllable 
if the context is clear. Note that we do not make any specific 
assumptions about the relation between the controllability and 
observability properties of an event. Thus, an unobservable 
event could be controllable, an uncontrollable event could be 
observable, and so forth. 

Remark 2: In terms of crisp languages where membership 
grades are either 1 or 0, the above observability as well as 
strong observability is the same as the observability in [9]. 

Remark 3: Clearly, C and O are always observable. It is 
obvious by definition that the concept of strong observability 
implies that of observability. But an observable fuzzy language 
need not to be strongly observable. For example, let 



and 



E = {a,b}, E c = E = {b}, 



„ 1 0.8 0.9 0.7 

e a b ab 



One can easily check that C is observable, but not strongly 
observable. 

Intuitively, a strongly observable fuzzy language JC allows 
the associated fuzzy supervisor to take more flexible control 
action than that of an observable fuzzy language, in order 



to exactly achieve JC. The cost of such flexibility is more 
constraint on JC itself. 

Let us provide some equivalent characterizations of observ- 
ability. 

Proposition 1: For a fuzzy language JC, the following are 
equivalent: 

1) JC is observable. 

2) For any s G supp(/C) and a G E c , there exists x such 
that JC(s'a) = JC(s') A£(s'a) Ax for any s' G {s' G supp(/C) : 
P(s') = P(s)}. 

3) For all s, s' G supp(/C) with P(s) = P(s'), and any 
a G E c , there exists x such that both JC(sa) = JC(s)A£(sa)Ax 
and JC(s'a) = JC(s') A C(s'a) A x. 

Proof: See Appendix II. ■ 

There is a difference between 2) and 3) above: in 2), we 
need for each controllable event, a common enabled degree for 
all the strings that are the same under the supervisor; in 3), 
we only need a common enabled degree for every two strings 
that are identical under the supervisor. 

For strong observability, we have an equivalent characteri- 
zation too. 

Proposition 2: A fuzzy language JC is strongly observable 
if and only if for any s, s' G supp(/C) and a G E c subject to 
P(s) = P(s') and sa, s'a G supp(£), the following conditions 
are satisfied: 

1) JC(sa) = JC(s) A C(sa) if and only if JC(s'a) = JC(s') A 
C{s'a); 

2) JC(sa) = JC{s'a). 

Proof: See Appendix II. ■ 

The following results show us that (strongly) observable 
fuzzy languages are closed under intersection. 

Proposition 3: 

1) If JCi and JCi are observable, then so is JC\ !~) JC2- 

2) If JCi and JC2 are strongly observable, then so is /CiflA^. 
Proof: See Appendix II. ■ 

The above proposition and proof remain true for arbitrary 
intersections. 

Remark 4: Note that if JC\ and JC 2 are strongly observable, 
we cannot obtain that JC\ U JC2 is (strongly) observable in 
general. The following counter-example serves: 

Let E = E c = {a, b}, E Q = {b}, 

0.7 



and 



Then 



„ 1 0.9 0. 

e a b ab 

e a e b 



„ „ 1 0.8 0.7 
/Ci u/c 2 = - + — + — . 

tab 

It is evident that JC\ and JC 2 are strongly observable; however, 
JCi U JC2 is not (strongly) observable. 

We are now ready to present the existence result for a 
partially observable fuzzy supervisor. 

Theorem 1: Let JC C C(G), where JC is a nonempty 
fuzzy language. Then there exists a partially observable fuzzy 
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supervisor Sp for G such that C Sp = AC if and only if AC is 
controllable and observable. 

Proof: See Appendix II. ■ 

The proof of Theorem \l\ there is constructive in the sense 
that if the controllability and observability conditions are 
satisfied, it gives us a partially observable fuzzy supervisor 
that will achieve the specification. For illustrating the theorem 
and its proof, let us examine a simple example. 

Example 1: Let E — {a, 6, c, d}, E uc — {d}, and E uo — 
{c}. The fuzzy languages C and AC are given by 

1 0.9 0.8 0.8 0.6 

ab ad 



C = 



ac 



0.4 0.6 

acb acd ' 



^ 1 0.7 0.4 0.7 0.4 
AC = - H 1 1 H ;. 

e a ac ad acd 



One can check by definitions that AC is controllable and ob- 
servable. The following partially observable fuzzy supervisor 
Sp that follows from the definition of Sp[P(s)] given in the 
proof of Theorem n can achieve AC: 



Sp(e) = 


= S P [P(e)} = 


0.7 
— + - + -- 

a b c 


1 






Sp(a) 


= S P [P(a)] = 


-S P [P(ac)} = 




a b 


0.4 
H f- 

c 


1 

d' 


S P {ab) 


= S P [P(ab)} 


= S P [P(acb)} 




= - + 
a 




b + c- 


1 


Sp(ad) 


= S P [P(ad)} 


= S P [P(acd)} 




= - + 
a 




b + c' 


1 



Let us check the membership grades of Sp(a) as an example: 
Sp[a](d) = 1 since d G S uc , 
S P [o](o) = V{/C(s'a) : P(s') = a} = 0, 
S P [a](b) = V{fC(s'b) : P(s') = a} = AC(a&) V K{acb) = 0, 
S P [a]{c) = V{/C(s'c) : P(s') = a} = AC(ac) = 0.4. ■ 

If a fuzzy language AC does not satisfy the conditions of 
Theorem then it is natural to consider the possibility of 
approximating AC. Let us first consider the existence of the 
"least" controllable and observable fuzzy superlanguage of AC. 
To this end, define 

W(/C) = {M G TC : AC C M C £ and .M 

is controllable and observable}. 
Observe that C G <tf@(lC), so the class c g6{K,) is not 
empty. Further, define AC^ co ) = |~| A4. Then from 

MEV(?(K.) 

Proposition we have the following. 

Proposition 4: The fuzzy language AC^ co ) is the least 
controllable and observable fuzzy superlanguage of AC. 

Proof: Note that arbitrary intersections of controllable 
and observable fuzzy languages are again controllable and 
observable. As a result, the proposition evidently holds. ■ 

Since by definition IC L(co '> C M for any M G ^(AC), 
we call AC^ co ) the infimal controllable and observable fuzzy 
superlanguage of AC. If AC is controllable and observable, then 
JCKCO) = K In the "worst" caS e, JC^ co ^ = C. 

We end this section with the Supervisory Control Problem 
(SCP) for fuzzy DES with partial observation. 



SCP: Given a fuzzy DES G with event set E, uncontrollable 
event set E uc C E, observable event set E Q C E, and two 
fuzzy languages C a and £i, where O ^ C a Q &i C C{G), 
find a partially observable fuzzy supervisor Sp such that £ a C 
C Sp CCi. 

Here, C a describes the minimal acceptable behavior and Ci 
describes the maximal legal behavior. SCP requires to find a 
fuzzy supervisor such that the behavior of controlled system 
is both acceptable and legal. The following result provides an 
abstract solution to SCP. 

Corollary 1: There exists a partially observable fuzzy su- 
pervisor Sp such that C a C C Sp C Ci if and only if 

£i (CO) C£, 

Proof: See Appendix II. ■ 

Although controllable fuzzy languages are closed under 
arbitrary unions, observable fuzzy languages are not closed 
under union in general. Consequently, it turns out that, in a 
given situation, a unique maximal controllable and observable 
sublanguage of AC need not exist. To obtain an approxima- 
tion using sublanguages in a reasonable manner, we will 
introduce a new subclass of fuzzy languages, called normal 
fuzzy languages, which is deferred to Appendix I since it is 
not necessary for subsequently discussing the decentralized 
control of fuzzy DES. 

IV. Decentralized Control 

In this section, we turn our attention to the decentralized su- 
pervisory control of a fuzzy DES that is physically distributed. 
Without loss of generality and for the sake of convenience, we 
consider the case that only two local partially observable fuzzy 
supervisors are used to realize the decentralized supervisory 
control. 

The problem of decentralized control is formalized as 
follows. We have two partially observable fuzzy supervisors 
S\ and 5*2 (for simplicity, in the sequel we write S for 
Sp), each associated with a different projection Pi,i = 1,2, 
jointly controlling the given system G with event set E. 
Associated with G are the four usual sets E c , E uc , E Q , and 
E uo . Corresponding to fuzzy supervisors Si and S2, we have: 

• the sets of controllable events E\ c , E2 C C E c satisfying 
E\ c U E-2.C — E c ; 

• the sets of observable events E\ ,E-2 C E Q satisfying 
E\ U E20 = E Q ; 

• the natural projection Pj : E* — * E* a corresponding to 
E io fori = 1,2. 

Then the local partially observable fuzzy supervisor Si, i = 
1, 2, is given by Si : P;[supp(£(G))] — > J~(E) which satisfies 
Si(s)(a) = 1 for any s G P[supp(£(C7))] and a G E\E ic . 

The behavior of the controlled system under the joint 
supervision of S\ and S2 is the fuzzy language £ s i aS 2 defined 
inductively by 

1) £ SlAS2 (e) = 1; 

2) £ SlAS2 (sa) = C(sa) A C SlAS2 {s) A 5i[Pi(s)](a) A 
S 2 [P 2 (s)](a) for any s G E* and a G E. 

Clearly, it follows from the definition of £ SlAS2 that 

£S!AS 2 g and £ S!AS 2 g j: C 
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Given a desired fuzzy language JC C C(G), our aim is 
to find the necessary and sufficient condition on JC that will 
ensure the existence of S\ and S 2 such that £ s i aS 2 _ ^ jx> 
this end, the concept of co-observability for fuzzy languages, 
as a generalization of co-observability for crisp languages [22], 
is required in place of observability appearing in the case of 
centralized control. 

Definition 7: A fuzzy language JC C C is called co- 
observable (with respect to C, Pi, and Ei C , i = 1, 2), if for all 
s e supp(/C) and a G S c = -Eic U i? 2c , the following hold: 

1) if a £ £ lc n £ 2c , then /C(sa) = JC(s) A £(sa) A 
[Vp 1 ( Sl ) = p 1 ( s )/C(sia)] A [Vp 2 ( S2 )=p 2 ( s )/C(s 2 a)]; 

2) if a G E lc \E 2c , then £(sa) = /C(s) A C(sa) A 
[V Pl(si)=Pl(;s) X;(s 1 a)]; 

3) if a G E 2c \E lc , then /C(sa) = JC(s) A £(sa) A 
[Vp 2 ( 52 )=p 2 ( s )/C(s 2 a)]. 

From the above definition, it is clear that the co- 
observability of fuzzy languages which takes the respective 
enabled degree of controllable events under two supervisors 
into account is a generation of observability. 

Remark 5: Like observability, co-observability is also 
closed under arbitrary intersections; this can be easily verified 
by using the above definition. It is not difficult to check that 
co-observable fuzzy languages are not closed under union in 
general. 

The property of co-observability describes the class of fuzzy 
languages that can be achieved by decentralized supervisory 
control in the situation of partial observation, as shown in the 
following. 

Theorem 2: Let JC C C(G) be a nonempty fuzzy language. 
Then there exist two local partially observable fuzzy supervi- 
sors Si and S 2 for G such that C SlAS2 = JC if and only if JC 
is controllable and co-observable. 

Proof: See Appendix II. ■ 

The above theorem and its proof can be easily extended for 
more than two local fuzzy supervisors. Analogous to that of 
Theorem ^ the proof of Theorem |2] is also constructive, and 
we can obtain two supervisors if the given fuzzy sublanguage 
is controllable and co-observable. We present an example to 
illustrate the theorem in the next section. 

V. An Illustrative Example 

In this section, we apply the previous results to an example 
arising from medical diagnosis and treatment. 

Suppose that there is a patient infected by a new infectious 
disease. The director decides to hold a consultation first, 
and then appoints one or two physicians to the patient's 
physicians-in-charge. All the physicians have no complete 
knowledge about the disease, but the physicians by their 
experience believe that two antibiotic drugs, say penicillin 
and chlortetracycline, may be useful to the disease. It is well 
known among medical doctors that the drug combination of 
penicillin and chlortetracycline may be have as little effect 
against an infection as prescribing no antibiotic drug at all, 
event if the bacteria are susceptible to each of these drugs. So 



ai|0.1/^\a 2 |0.6 ai|0.5/^~Na 2 |0.3 

^ J oi|0.9,oa|0.4 ^ J oi|0.4,aa|0.8 
-P ' F 




Mo- 1 



Fig. 1. Fuzzy automaton G to model a patient's condition. 

the physicians decide to use the drugs separately. Moreover, 
the physicians think that the effect of penicillin is better 
than that of chlortetracycline for a patient who is in a poor 
condition and vice versa for a patient who is in a fair condition, 
since penicillin is a bactericidal antimicrobial drug, while 
chlortetracycline is a bacteriostatic one. In addition, the drug- 
resistance of bacteria and some possible negative symptoms 
such as fever, high white blood cell count, and increased 
sedimentation rate of the blood have also been taken into 
account by the physicians. 

Further, the physicians consider roughly the patient's con- 
dition to be three states: "poor", "fair", and "excellent", 
and agree that the present treatment must be stopped to 
finding other therapies once there are some negative symptoms 
indicating that the patient's condition reverts to the initial 
situation, i.e., the poor state. Such a status of diagnosis and 
treatment can be logically modelled via a fuzzy DES with 
supervisory control, in which the drugs and the negative 
symptoms are thought of as events. Suppose that for each 
event, the physicians by their experience have an estimation of 
the transition possibility among states (there are many methods 
for estimating membership grades; see, for example, pages 
256-260 of [4]), and suppose that the dose of drug which is 
prescribed by the physician-in-charge can affect the transition 
possibility of the drug event. The drug events are considered 
to be controllable and observable, while the symptom events 
are uncontrollable and some of them are observable only by 
those physicians who are sensitive to or concerned about the 
symptoms. 

We use ai and a 2 to denote the drug events, namely, 
penicillin and chlortetracycline. Denote by hi, i = 1,2,3, the 
negative symptoms. According to the physicians' estimation, 
these events and their transition possibilities among states 
are depicted in Fig. 1, where the capital letters P, F, and E 
represent poor, fair, and excellent, respectively. This transition 
graph is a common knowledge among the physicians after 
consultation. Recall that the weight of a string is interpreted 
as the possibility of occurrence of the string and is obtained by 
using the operation max min. For example, the weight of the 
string a±a 2 is 0.8, which is the physical possibility to arrive at 
the excellent state after using penicillin and chlortetracycline 
in turn. 

Any therapy is required to conform to the specification 
which is determined by the physicians according to their 
common knowledge and the patient's situation: 



0.8 



0.2 



0.3 



0.2 



0.3 



JC = - + — 

e ai a\a 2 a\b\ a\b 2 a\a 2 b\ a\a 2 b 2 



0.3 



0.2 



0.3 



0.2 



0.2 



aia 2 b 3 aia 2 &3&i aia 2 b 3 b 2 aia 2 b 3 ai a 1 a 2 6 3 a 1 6 1 
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0.2 



0.2 



0.2 



0.2 



a 1 a 2 b 3 aib2 aia 2 b 3 aib 3 a 1 a 2 b 3 a 1 b 3 b 1 a 1 a 2 b 3 a 1 b 3 b 2 

Now, the director appoints a physician, say Si, to the pa- 
tient's physician-in-charge. We regard the physician-in-charge 
Si as a supervisor and suppose that Ei c = {ai,a 2 } and 
Eio — {ai,bi, a 2 ,b 3 }. By definition, it is easy to check 
that £ is controllable. But £ is not observable by Si. In 
fact, take s = ai,s' = aib 2 e supp(£) and a 2 e Ei c . 
We then see that Pi(s) = Pi(s') = ai, but there is no x 
such that both £(sa 2 ) — £(s) A £(sa 2 ) A x and £(s'a 2 ) = 
K-(s') /\£(s'a 2 ) Ax, which contradicts 3) of Proposition^ As 
a result, under the supervisory control of Si, there is no hope 
of achieving the specification £ by Theorem [2 

If the director takes possible medical errors into account 
and would like to appoint one more physician, say S2, to the 
patient's physician-in-charge, and assume that E 2c = {01,02} 
and E 2o = {01,62,02,63}. Then the specification £ can be 
accomplished through the joint control of two physicians-in- 
charge, since £ is now co-observable. From the proof of 
Theorem|2l we may take two supervisors Si and S2 as follows: 

0.9 1 1 1 

Oi 2 61 6 2 63 



S 1 (e) = S 2 (e) 
Si(ai) = S 2 (ai) 





a 1 



0.8 1 

a 2 61 
0.2 



1 1 

b 2 63 ' 
1 1 



£1(010263) = S 2 {aia 2 b 3 ) = — — I ^ 7- + T + 7- 



Si{ui) = S 2 (uj 2 ) = — 
ai 



a 1 
1 

02 61 



"_> 61 
1 1 

62 63 



1 



for any u>i € P,; [supp(£(G))]\{e, ai , 010263}, i — 1,2. 

We compute the membership grades of 51(010263) and 
52 (010263) as an example. By the definition of Si[Pi(s)] given 
in the proof of Theorem [2] we get that Si{aia 2 b 3 )(bj) = 
S 2 (aia 2 b 3 )(bj) = 1 for j — 1,2,3, since bj G E\Ei c , and 
that 



5i(aia26 3 )(ai) 



5i(aia26 3 )(a2) = 



5 2 (aia 2 6 3 )(ai) 



52(aia26 3 )(a2) = 



Vp 1 ( Sl ) =aia2 b 3 /C(siai) 
IC(aia 2 b 3 ai) V £(0102636201) 
0.2 VO = 0.2, 
Vp 1 ( Sl ) =0102 6 3 /C(sia 2 ) 
£(01026302) V £(0102636202) 
V0 = 0, 



V 



P 2 (S2 



2 6 3 £(s 2 ai) 



£(01026301) V £(0102636101) 
0.2 VO = 0.2, 

V P 2 (s 2 )=a 1 a 2 b 3 fc(s 2 a 2 ) 

£(01026302) V £(0102636102) 
VO = 0. 



VI. Conclusion 



In this paper, we have established and studied the cen- 
tralized and decentralized supervisory control problem for 
fuzzy DES with partial observation. Observability, normality, 
and co-observability of crisp languages have been extended 



to fuzzy languages. We have elaborated on the necessary 
and sufficient conditions on a given fuzzy language for the 
existence of a partially observable fuzzy supervisor and local 
fuzzy supervisors, respectively. Moreover, we have discussed 
the infimal controllable and observable fuzzy superlanguage, 
and the supremal controllable and normal fuzzy sublanguage. 
These concepts and results are consistent with the existing 
theory in the framework of Ramadge-Wonham. Moreover, we 
have introduced the strong observability of fuzzy languages 
for comparison with the observability. 

The supervisory control formalization presented here can 
be extended in many ways. Firstly, formulae and computa- 
tion relating controllability, normality, and co-observability of 
fuzzy languages are yet to be established. Secondly, using non- 
conjunctive fusion rules [17], [26] to investigate decentralized 
control of fuzzy DES is feasible. Finally, decentralized super- 
visory control with local specification remains an interesting 
problem. 

Appendix I 
Normality 

In this appendix, we first introduce the concept of normal 
fuzzy languages which is a generalization of normality for 
crisp languages in the sense of Lin and Wonham [10]. Then we 
consider the existence of the "largest" controllable and normal 
fuzzy sublanguage, and also discuss the relation between 
normality, observability, and controllability. 

Recall that we have defined the natural projection P : E* — > 
E* whose effect on a string s is to erase the elements of s that 
are not in E a . For later need, we extend P to V : T(E*) — > 
T(E* ) via 

V(K)(cj) = V P(U , )=U /C( W ') 

for any £ e T{E*) and uj £ E*. 
We also define p- 1 : F{E* ) - 

V-\M){lo) = 



-> F(E*) as follows: 
M{P{u)) 



for any M E T(E* Q ) and lo e E*. 

Clearly, the definitions of V and V~ x are well-defined; 
furthermore, we have the following. 

Proposition 5: Let V and V^ 1 be defined as above. 

1) If £ is a fuzzy language over E, then P(£) is a fuzzy 
language over E Q . 

2) If M. is a fuzzy language over E a , then V^ 1 (A4) is a 
fuzzy language over E. 

Proof: See Appendix II. ■ 

Recall that in [10] (cf. the definition of recognizable lan- 
guages in [3]) a crisp language K C L is called normal (with 
respect to L and P) if K = P _1 [P(X)] P\L. For normality of 
fuzzy languages, we have to incorporate membership grades 
into the normality of their supports as crisp languages. Keeping 
the previous notation, we can now introduce the normality of 
fuzzy languages. 

Definition 8: A fuzzy language £ C £ is said to be normal 
(with respect to £ and P) if 

ic = v- 1 [P(ic)}n£. 
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Intuitively, normality for a fuzzy language means that JC can 
be exactly recovered from its projection V{JC) and £ itself. 
Observe that both O and £ are normal with respect to £ and 
P, so the above property is not vacuous. 

The notion of fuzzy language normality reduces to normal- 
ity of crisp languages if membership grades in fuzzy languages 
are only allowed to be either or 1. The following relationship 
between them provides a necessary condition for a fuzzy 
language to be normal. 

Proposition 6: If a fuzzy language JC C £ is normal with 
respect to £ and P, then the crisp language supp(/C) is normal 
with respect to supp(£) and P in the sense of crisp language 
normality. 

Proof: See Appendix II. ■ 

A desired property of normal fuzzy languages is that they 
are closed under arbitrary unions, as shown below. 

Proposition 7: If for each i £ /, /Q C £ is normal with 
respect to £ and P, then so is IJ ie/ K%. 

Proof: See Appendix II. ■ 

The following theorem shows us that normality is stronger 
than observability. 

Theorem 3: If JC C £ is normal with respect to £ and P, 
then JC is observable with respect to £, P, and E c for any 
E C CE. 

Proof: See Appendix II. ■ 

Remark 6: The converse statement of the above theorem is 
not true in general. For instance, JCi in Remark|4]is observable; 
however, it is not normal. 

We are now in the position to present an approximation of JC 
using controllable and observable sublanguages, as promised. 
For this, let us introduce a new class of fuzzy sublanguages 
of JC as follows: 

^.vV(JC) = {M C JC : M is controllable and normal}. 

Observe that O G c (o,jV(JC), so the class is not empty. 
Define JC^ CN ^ = y M _ Nextj 

using Proposition 

0we can establish the existence of the supremal controllable 
and normal fuzzy sublanguage of JC. 

Proposition 8: The fuzzy language £T(CA0 j s tne larger 
controllable and normal fuzzy sublanguage of JC. 

Proof: Note that arbitrary unions of controllable and 
normal fuzzy languages are again controllable and normal. 
Consequently, the proposition holds obviously. ■ 

It should be pointed out that JC^ CN ^ may not in general 
a maximal controllable and observable fuzzy sublanguage of 
JC. In other words, there may be controllable and observable 
fuzzy sublanguages that are strictly larger than the supremal 
controllable and normal fuzzy sublanguage. 

As shown earlier, an observable fuzzy language is not 
normal in general; however, under certain conditions, observ- 
ability does imply normality. 

Theorem 4: Suppose that E c C E a . If JC C £ is control- 
lable (with respect to £ and E uc ) and observable (with respect 
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to £, P, and E c ), then JC is normal (with respect to £ and 
P). 

Proof: See Appendix II. ■ 

The importance of this theorem lies in the fact that when 
the assumption E c C E a is fulfilled, that is, when all 
the controllable events are observable, or equivalently when 
all the unobservable events are uncontrollable, the theorem 
implies that the supremal controllable and observable fuzzy 
sublanguage does exist, which is given by JC^ CN \ 

Appendix II 
Proofs 

For the need of proofs, we make an observation first. 
Lemma 1: Let JC be an observable fuzzy language, s\, s 2 G 
supp(AC) with P(si) = P{s2), and a G E c . 

1) If JC(sia) < JC(si) A £{sia) for i = 1, 2, then K(sia) = 
JC(s 2 a). 

2) If JC( Sl a) < K(si) A £(sia) and JC(s 2 a) = JC(s 2 ) A 
£{s 2 a), then JC(s 2 a) < JC{s\a). 

Proof: 

1) : If s\a supp(X) and s 2 a £ supp(/C), then JC(sia) — 
JC(s 2 a) = 0. Otherwise, there is Sjd, say s 2 a, in supp(/C). 
By the definition of observability, there exists x such that 
K(s\a) = JC(si)A£(sia)/\x and K(s 2 a) = JC(s 2 ) A£(s 2 a) A 
x. From the assumption that JC(sia) < JC(si) A £{sia) for 
i = 1,2, we see that JC(sia) — x — JC(s 2 a), as desired. 

2) : If JC(s 2 a) — 0, then it is obvious that JC{s 2 a) < JC{s\a). 
In the case of JC(s 2 a) > 0, there exists x such that JC(sia) = 
fC(si) A £(sia) A x and JC{s 2 a) = JC(s 2 ) A £{s 2 a) A x 
by the definition of observability. Hence, it follows from 
the conditions of 2) that JC{s\d) — x and JC(s 2 a) < x. 
Consequently, JC{s 2 a) < JC{s\a). ■ 

Proof of Proposition ^} 

1)=>2): For any s € supp(/C) and a G E c , set [s] = {s' G 
su PP (a:) : P(s') = P(s)} and x [s]a = V yeW /C(s'a). We 
claim that x = xi s ] a satisfies JC(s'a) = JC(s') A C(s'a) A x 
for any s' G [sj. In fact, if JC(s'a) = JC(s') A £(s'a), 
then the claim evidently holds since JC(s'a) < xt s i a . If 
JC(s'a) < JC(s') A £{s'a), then by Lemma [2 we have that 
X[s]a = V s / 6 [ s ]/C(s'a) = JC(s'a), and the claim holds too. 

Observe that 2)^3) and 3)=>1) are obvious, so the propo- 
sition is true. ■ 

Proof of Proposition |2} We first prove the necessity. Let 
s, s' G supp(AC) and a G E c such that P(s) = P(s') and 
sa, s'a G supp(£). 

For condition 1), we only prove the 'only if part; the 'if 
part is symmetric. Suppose that JC(sa) — /C(s) A£(sa). From 
the assumptions that s G supp(/C) and sa G supp(£), we see 
that JC(sa) > 0. Thus by the definition of strong observability, 
we know that for any x, if JC(sa) — JC(s) A £(sa) A x, then 
JC(s'a) = IC(s') A £(s'a) A x. In particular, taking x = 1, we 
get that JC{s'a) = JC{s') A £(s'a) A 1 = JC(s') A £{s'a). 

To verify condition 2), let us first show the fact that JC(sa) — 
if and only if JC(s'a) = 0. We prove the 'if part; the 'only 
if part is similar. Suppose that JC(s'a) = 0. By contradiction, 
assume that JC(sa) > 0. Then by the definition of strong 
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observability, for any x G {x : K.(sa) = K.(s) AC(sa) Ax}, we 
must have that IC(s'a) — IC(s') AC(s'a) Ax. However, taking 
x = IC(sa), we see that IC(s'a) = IC(s') AC(s'a) AlC(sa) > 
since s' G supp(/C) and s'a G supp(£) by the assumptions. 
It is a contradiction. Next, we consider the case that both 
IC(sa) > and JC(s'a) > 0. By the foregoing property P2) we 
see that K(sa) < /C(s) and K,(s'a) < fC(s'). Note that K, C C 
which means that K,(uj) < C(uj) for any ui. Consequently, 
JC(sa) < K.(s) A C(sa) and £(s'a) < fC(s') A C(s'a). By 
1), there are only two cases: The first is that both K,(sa) = 
K,(s)AC(sa) and IC(s'a) — IC(s') AC(s'a); the second is that 
both K(sa) < /C(s) AjC(so) and IC(s'a) < fC(s') AC(s'a). For 
the first case, by taking x = K,(sa) in the definition of strong 
observability, we have that IC(s'a) = IC(s') A C(s'a) A fC(sa), 
which yields that K(s'a) < IC(sa). By interchanging s and s', 
and taking x = /C(s'a), we get that K(sa) < IC(s'a). Hence 
JC(sa) = JC(s'a) in the first case. For the second case, noting 
that a strongly observable fuzzy language is observable, we 
obtain that IC(sa) — IC(s'a) fromLemma[2 thus finishing the 
proof of the necessity. 

Now, let us show the sufficiency. Suppose that s,s' G 
supp(AC) with P(s) = P(s'), a G E c satisfying sa 6 supp(/C), 
and xo G {x : /C(sa) = K(s) A C(sa) A x}. It needs to verify 
that lC(s'a) = JC(s') A C(s'a) A x . 

If C(s'a) = 0, then it forces that K,(s'a) = 0, and thus 
IC(s'a) = IC(s') A C(s'a) A x . 

In the case of C(s'a) > 0, conditions 1) and 2) can be 
applicable. Further, if K.(sa) = K,(s) A C(sa), then we get 
that {x G [0, 1] : fC(sa) = /C(s) A £{sa) Ax} — [IC(sa), 1] 
and K(s'a) — K-(s') AC(s'a) by condition 1). Therefore, xq > 
K-(s'a) by condition 2), and thus K(s'a) = IC(s') AC(s'a) Axq 
holds. If IC(sa) < JC(s) A C(sa), then {x : IC(sa) = 
JC(s) A £{sa) Ax} — {JC(sa)} and JC(s'a) < JC(s') A C(s'a) 
by condition 1). Hence, xq — K.(s'a) by condition 2) and 
JC(s'a) — IC(s') AC(s'a) Axq holds. This completes the proof 
of the proposition. ■ 

Proof of Proposition 

1) Suppose that s, s' G supp(/Ci nK.2) and a G E c such that 
P(s) = P(s') and sa G supp(ACi n IC 2 ). Since Id, i = 1, 2 is 
observable, there exists Xi such that fCi(sa) = K.i(s) AC(sa) A 
Xi and JCi(s'a) = Ki(s')AC(s'a)AXi. Setting x = X1AX2, we 
can easily check that (/Cin/C 2 )(sa) = (K-iD^is) AC(sa) Ax 
and (Ki n K, 2 ){s'a) = (Id n /C 2 )(s') A C(s'a) A x. It follows 
from definition that K,\ n K>% is observable. 

2) By contradiction, suppose that K,\ n /C2 is not strongly 
observable. Then by definition there exist s, s' G supp(/Ci fl 
/C2) with P(s) — P(s'), a G E c , and a; such that sa G 
supp(/Ci fl /C2) and 

/Ci (sa) A /C 2 (sa) = Ki(s) A K 2 {s) A C{sa) A x, (1) 

but 

Id(s'a) A IC 2 (s'a) ^ Id(s') A K 2 (s') A C(s'a) A x. (2) 

The last inequality implies that s'a G supp(£); otherwise, both 
sides of inequality (2) are zero. As sa G supp(/Ci fl /C2), we 
get that sa G supp(£). Thus Proposition [2] is applicable to /Ci 



and A^2- As a result, we have the following: for i = 1, 2, 

K-i(sa) = ICi(s) A C(sa) /Cj(s'a) = K-i(s') A C(s a), (3) 
and 

/Ci(sa) = Ki(s'a). (4) 

Four cases need to be discussed: 

Case 1: /Q(s'a) = /Q(s') A £(s'a), z = 1, 2. Using (3), we 
see that ICi(sa) = Ki(s) AC(sa). Applying them to (1) yields 
that K,i(sa)AlC 2 (sa) — K,i(sa)AlC 2 (sa)Ax. However, we find 
from (2) and (4) that K\(sa) AfC 2 (sa) ^ /Ci (sa) AfC 2 (sa) Ax. 
This is a contradiction. 

Case 2: 1d(s'a) < /Cj(s') A C(s'a), i = 1,2. Using (3) 
again, we have that ld(sa) < /Cj(s) AC(sa). Hence ICi(sa) A 
1C 2 (sa) < fCi (s) A 1C 2 (s) A C(sa), which means that /Ci (sa) A 
JC 2 (sa) =xby (1). Using (4) and Ki(s'a) < K-i(s') A C(s'a), 
we have that x = tCx(sa) A K, 2 (sa) — JC\ (s'a) A JC 2 (s'a) < 
ld(s')AlC 2 (s')AC(s'a). This forces that Id (s'a) A K 2 (s'a) = 
JCi(s') A K- 2 (s') A C(s'a) A x, which contradicts with (2). 

Case 3: Id(s'a) = ld(s')AC(s'a) and )C 2 (s'a) < K 2 (s')A 
C(s'a). By (3), we also have that K\(sa) = K,\(s)AC(sa) and 
IC 2 (sa) < IC 2 (s)AC(sa). In the subcase of ICi(sa) < K, 2 (sa), 
we also get that K-i(s'a) < K, 2 (s'a) by (4). Thus JC\(sa) A 
K, 2 (sa) = Ki(s) A K 2 (s) A C(sa) and Id(s'a) A K, 2 (s'a) = 
/Ci(s') AlC 2 (s') AC(s' a). From the former and (1), we see that 
K\(sa) A K, 2 (sa) = K\(sa) AfC 2 (sa) A x; from the latter and 
(2), we see that K%(s'a) A IC 2 ('sa) ^ /Ci (s'a) A K 2 (s'a) A x. 
This is absurd by (4). In the other subcase, i.e., K,\(sa) > 
IC 2 (sa), we see that /Ci (s'a) > K, 2 (s'a) from (4). Further, 
we have that JCi(sa) A K, 2 (sa) < /Ci(s) A K 2 (s) A C(sa) and 
JCi(s'a)AJC 2 (s'a) < ld(s')AlC 2 (s')AC(s'a). The former and 
(1) force that x = K\ (sa) A K 2 (sa). Therefore x = K\ (s'a) A 
K, 2 (s'a), and thus Id(s') A /C 2 (s') A C(s'a) Ax = Id(s'a) A 
K. 2 (s'a), which contradicts with (2). 

Case 4: Id(s'a) < ld(s')AC(s'a) and /C 2 (s'a) = IC 2 (s')A 
C(s'a). This case is symmetric to Case 3, so we omit its proof. 
■ 

Proof of Theorem^} We prove the sufficiency first. Suppose 
that K, is both controllable and observable. For any P(s) G 
P[supp(£(G))], let us define 

Sp[P(s)](a) = I v '| /c(s / a) . = p ^ ifa£ E ™ 

Clearly, with the above definition Sp is a partially observable 
fuzzy supervisor. 

It remains to verify that C p = Id We prove this by using 
induction on the length of strings. The base case is for strings 
of length 0. By the definition of C Sp , we see that C Sp (e) = 
1 = K,(e). So the base case holds. The induction hypothesis is 
that C Sp (s) = K,(s) for all strings s with length n. We now 
prove the same for strings sa, where a G E. In the case of 
a G E uc , we obtain by definition that 

C Sp (sa) = C(G)(sa) AS P [P(s)](a) AC Sp (s) 

= C(G) (sa) A C Sp (s) (by definition of S P ) 

= £(G)(sa) A fC(s) (using induction hypothesis) 

= K-(sa), (by controllability of Id) 
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i.e., £ Sp (sa) = fC(sa). Now, let us consider the other case 
a G E c . In this case, 



£ Sp (sa) 



£(G)(sa) A Sp[P(s)](a) A £ Sp (s) 
= £(G) (sa) A S P [P(s)] (a) A JC(s) 
= £(G)(sa) A [V{/C(s'a) : P(s') = P{s)}} 
A/C(s). (5) 

Thus, it is clear that £ Sp (sa) > JC(sa). By contradiction, 
suppose that £ Sp (sa) > lC(sa). Then from (5) we get that 
C(G)(sa) A AC(s) > AC(sa) and V{K(s'a) : P(s') = P(s)} > 
JC(sa). So there exists s' with P(s') = P(s) such that 
K,(s'a) > IC(sa). 

If IC(sa) > 0, then it is necessary that s, s' G supp(AC). 
Furthermore, by the observability of AC, there exists x such 
that both fC(sa) = tC(s) A £(G)(sa) A x and fC(s'a) = 
AC(s') A £(G)(s'a) A x. The first equality, together with the 
previous argument that £(G)(sa) A AC(s) > AC(sa), forces 
that x = IC(sa); the second equality implies that x > 
JC(s'a). Consequently, IC(sa) > K-(s'a), which contradicts 
with /C(s'a) > AC(sa). 

In the case of IC(sa) = 0, if V{/C(s'a) : P(s') = P(s)} = 
0, then we see from (5) that C Sp (sa) = = AC(sa); otherwise, 
there exists s' such that IC(s'a) > and P(s') = P(s). 
Clearly, s' G supp(AC). Note also that s G supp(/C) since 
C(G)(sa) A /C(s) > IC(sa). Again, by the observability of IC, 
there exists x such that both K(s'a) = IC(s') A C(G)(s'a) A x 
and IC(sa) = IC(s) A £(G)(sa) A a;. The second equality, 
together with the fact that C(G)(sa) A /C(s) > K,(sa), forces 
that x = K{sa) = 0. Therefore K(s'a) = K{s') hC(G)(s' 'a) A 
x — 0, which contradicts with K-(s'a) > 0. This completes the 
proof of the induction step. 

Next, to see the necessity, suppose that there exists a 
partially observable fuzzy supervisor Sp for G such that 
C Sp — AC. For controllability, by definition it suffices to show 
that C Sp (sa) = C Sp (s) A C(G)(sa) for any s E E* and 
a £ E uc . In fact, by definition we have that 

C Sp (sa) = C Sp (s)AS P [P(s)} (a) A C(G) (sa) 
= C Sp (s) AC(G)(sa), 

since Sp[P(s)}(a) = 1 for each a G E uc . To prove the ob- 
servability of AC, take any s, s' G supp(AC) with P(s) = P(s') 
and a e E c such that AC(sa) > 0. Selecting x = S P [P(s)](a), 
we have that 

K.(sa) = C Sp (sa) 

= C Sp (s)AC(G) (sa) A S P [P(s)} (a) 

= K,(s) A C(G)(sa) A x 

and 

K(s'a) = C Sp (s'a) 

= C Sp (s') A C(G)(s'a) A 5 P [P(s')](a) 

= IC(s') AC(G)(s'a) AS P [P(s)](a) 

= AC(s') A C(G)(s'a) A £. 

Hence, AC is observable. The proof of the theorem is com- 
pleted. ■ 



Proof of Corollary [7} Suppose that there is a partially 
observable fuzzy supervisor Sp such that C a C £ Sp C £ ; . 
Then by Theorem we know that £ Sp D £ a is both 
controllable and observable. Note that C^ 00 ^ is the infimal 
controllable and observable fuzzy superlanguage of C a by 
Proposition El so £ l a {CO) C £ Sp C £ ; . 

Conversely, assume that £i (<70) C £ ; . Cleai-ly, the control- 
lable and observable fuzzy language £a^ C °^ is not the empty 
fuzzy language. Therefore by Theorem [2 there is a partially 
observable fuzzy supervisor Sp such that £ Sp = £^ CO \ and 
thus £ a C£ Sp C£ t . U 

Proof of Theorem [2} We first prove the necessity. Suppose 
that there exist two local partially observable fuzzy supervisors 
Si and ^ for G such that £ s ^ s * = AC. To see the 
controllability of AC, let s G E* and a G E uc . Then we obtain 
that 

AC(sa) = £ SlAS2 (sa) (by assumption) 

= £(sa) A£ SlAS2 (s) A5i[Pi(s)](a) 

A5 2 [P 2 (s)](a) (by definition) 
= £(sa) A £ SlAS2 (s). (since a G E uc ) 

Hence, AC is controllable by the definition of controllability. 
Now we consider the co-observability. Let s G supp(AC) and 



a G E c . The assumption AC = £ 



SiAS 2 



gives rise to 



AC(sa) = £(sa) A £ SlAS2 (s) A S*i[Pi(s)](a) A 5 2 [P 2 (s)](a). 

(6) 

From this equality, we always have that K,(sa) < £(sa) A 
£ SlAS2 (s). Note that if AC(sa) = £(sa) A £ SlAS2 (s), then 
all the conditions 1), 2), and 3) in the definition of co- 
observability are satisfied since Vp 1 ( Sl ) = p 1 ( s )AC(sia) > K,(sa) 
and Vp 2 ( SQ ) = p 2 ( s )AC(s 2 a) > K-(sa). It remains to discuss the 
case of IC(sa) < £(sa) A£ SlAS2 (s). In this case, we see from 
(6) that 



AC(sa) = Si [Pi (»)] (a) A S 2 [P 2 (s)}(a) 



(7) 



Let us consider all possible subcases: 

Subcase I: a G E\ c n P 2c - According to Defi- 
nition we need to show that AC(sa) = AC(s) A 
£(sa) A [Vp 1 ( Sl ) =Pl ( s )AC(sia)] A [Vp 2 ( S2 )=p 2 ( s )/C(s 2 a)]. Ob- 
serve that AC(sa) < AC(s) A £(sa) A [Vp 1 ( Sl ) = p 1 ( s )AC(sia)] A 
[ v P2(s2)=P2(s)^-( s 2 a )]- Assume that IC(sa) < AC(s) A £(sa) A 
[Vp l(si ) = p lW AC(sia)] A [Vp 2(s2)= p 2(s) AC(s 2 a)]. Then we ob- 
tain that AC(sa) < Vp.( s .) = p.( s )AC(sia) for i = 1,2. So 
there exists s^ with Pi(s' i ) = Pi(s), i = 1,2, such that 
AC(s'a) > IC(sa). 

On the other hand, from the assumption AC = £ S ^ AS ^ and 
Pi(st) = p(s), we have that 

AC(^a) = £ SlAS ^a) 

= A^A^^A^Px^Ka) 
A5 2 [P 2 (4)](a) 

< Si[Pi(8)](a), 

that is, K(s[a) < S t [P t (s)](a) for i = 1,2. Further, if 
5i[Pi(s)](a) < 5 2 [P 2 (s)](a), then (7) forces that AC(sa) = 
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Si[Pi(s)](a). Consequently, ^(s^a) < K{sa), which con- 
tradicts with the foregoing argument /C(s^a) > JC(sa). If 
5i[Pi(s)](a) > S 2 [P 2 (s)](a), then (7) yields that K{sa) = 
S 2 [P2(s)}(a). This, together with JC{s' % a) < S l [P l (s)](a), 
leads to JC{s' 2 a) < K.(sa), which is again a contradiction. 
So the previous assumption that JC(sa) < fC(s) A C(sa) A 
[V Pl ( Sl ) = p l(s )A:(sia)]A[V F2 ( S2 ) = p 2W /C(s2a)] does not work, 
and we have thus proved Subcase 1. 

Subcase 2: a G Pi c \P 2c . Now we need to verify that 
K,(sa) — K,(s) A C(sa) A [Vp 1 ( Sl ) = p 1 ( s )/C(sia)]. Since a ^ 
-E-2C, by definition we have that S 2 [P 2 (s)](a) = 1. Accord- 
ingly, we see from (7) that IC(sa) = Si[Pi(s)](a). Clearly, 
IC(sa) < K.(s) A C(sa) A [V Pl ( sl - )=Pl ( s - ) lC(sia)]. Similar to 
the proof of Subcase 1, we assume that K,(sa) < /C(s) A 
C(sa) A [Vp 1 ( si ) = p 1 ( s )/C(sia)], which means that IC(sa) < 
V p 1 ( Sl )=p 1 (s)fc( s i a )- Therefore there exists with Pi{s[) = 
Pi(s) such that /C^a) > fC(sa). Notice that 



JC(sia) 



= C(s' ia ) A £* AS Vi) A Si[i\(«i)](o) 

A5 2 [P 2 (si)](a) 
< Si [Pi (si)] (a) 
= Si[Pi(,s)](a), 



i.e., A^(sia) < Si [Pi (s)] (a). This, together with /C(sa) = 
Si [Pi (s)] (a), gives rise to ^(s^a) < K,(sa), which contradicts 
with K,(s[a) > K,(sa). Thus Subcase 2 is proved. 

Subcase 3: a G P 2c \Pi c . It is similar to Subcase 2, so we 
can omit its proof. So far we have completed the proof of the 
necessity. 

Next, we show the sufficiency by constructing two partially 
observable fuzzy supervisors Si : Pi[supp(£(G))] -P(P)- 
Suppose that IC is controllable and co-observable. For any s G 
supp(£(G)), define Si[Pi(s)} according to 



Si [Pi (a)] (a) 



1, if a G E\Ei, 

Vp i ( Si ) = p j ( s )^(s i a), if a G P 4C . 



Obviously, S^, i — 1, 2 is a fuzzy supervisor. 

We claim that £ s i AS 2 = /C, which will be proved by 
induction on the length of string s. 

Basis step: s = e. Clearly, £ SlAS2 (e) = 1 = /C(e) by the 
definition of £ S ^ AS ^ and the condition K ^ O. So the basis 
step is valid. 

Induction step: Assume that for all strings s with |s| < n, 
we have that C SlAS2 (s) = /C(s). We now prove the same for 
strings of the form sa, where a G E. Four possible cases need 
to be considered. 

Case 1: a G E uc . By the definition of C SlAS2 , we have that 

C SlAS2 (sa) = C(sa) AC SlAS2 (s) A Si [Pi (s)] (a) 
AS 2 [P 2 (s)](a) 
= £(sa) A £ SlAS2 (s) (since a G P„ c ) 
= C(sa) A /C(s) (by induction hypothesis) 
= IC(sa), (by controllability of IC) 

i.e., £ SlAS2 (sa) = JC(sa), as desired. 



Case 2: a G Pi c PI P 2c . In this case, the co-observability of 
IC can be applicable, and we obtain that 

C SlAS2 (sa) = C(sa) A£, SlAS ' 2 (s) A S x [Pi (s)] (a) 

AS 2 [P 2 (s)](a) 
= C(sa) A/C(s) A Si [Pi (s)] (a) 

AS 2 [P 2 (s)](a) (by induction hypothesis) 
= £(sa) A fC(s) A [Vp l(si)= p l(s )/C(sia)] 

A[Vp 2(;52 ) = p 2 ( s )/C(s 2 a)] (by definition of Si) 
= IC(sa), (by co-observability of AC) 

i.e., C SlAS2 (sa) =K(sa). 

Case 3: a G Pi c \P 2c . In this case, the co-observability of 
AC can also be applicable, and we have that 

C SlAS2 (sa) = C(sa) A£. SlAS ' 2 (s) A S x [Pi (s)] (a) 
AS 2 [P 2 (s)](a) 
= £{sa) A K.(s) A S x [Pi (s)] (a) (since a £ P 2c ) 
= £(sa) A /C(s) A [Vp l(si ) = p l(s )/C(sia)] 

(by definition of Si) 
= IC(sa), (by co-observability of IC) 

i.e., £ SlAS2 (sa) = K{sa). 

Case 4: a G P 2c \£i c . It is similar to Case 3, and the proof 
is omitted. This finishes the proof of the theorem. ■ 

Proof of Proposition 

1): If /C is the empty fuzzy language, then it is evident that 
V(IC) is the empty fuzzy language. For IC ^ O, we need to 
check the properties PI) and P2) in the definition of fuzzy 
languages. Obviously, V(IC)(e) = Vp( W ') =e AC(cj') = 1 since 
K,(e) — 1. Hence, PI) holds. To see P2), it is sufficient to show 
that V(JC)(sa) < V{K)(s) for any s G E* and a G E Q . By 
contradiction, assume that V()C)(sa) > V(IC)(s) for some s G 



E* Q and a G E Q . Note that V{K){sa) 



'P{u 



sa K{u)') and 



V{IC){s) = Vp(n')= a K,(ii'). Thereby, there exists lu' G E* 
with P(oj' q ) = sa such that JC(uj' q ) > tC(p') for any \i! G E* 
satisfying P(/i') = s. Since P(wq) — sa > we can write ui' 
as w'iW^ which satisfies P(u[) = s and P{lo' 2 ) = a- Thus, 
we get that ^(^[lu^) > ^-(^i), a contradiction. We therefore 
conclude that P2) holds. 

2): If M = O, then it is clear that V^iM) = O. For 
M. 7^ O, we check the properties PI) and P2). By definition, 
we see that p- 1 (M)(e) = M{P{e)) = M(e) = 1. So 
PI) holds. For P2), it suffices to verify that V^ 1 (M)(sa) < 
T > - 1 (M)(s), namely M(P{sa)) < M(P{s)), for any s G E* 
and a G E. If a G P uo , then P(sa) — P(s), and thus 
X(P( sa )) = X(P( S )). If a G E a , then P(sa) = P(s)a, and 
thus M(P{sa)) = M(P(s)a) < M(P(s)). This completes 
the proof. ■ 

Proof of Proposition |6} By definition and the fact that 
supp(AC) is closed, we need to show that supp(/C) = 
P _1 [P(supp(/C))] n supp(£). It is obvious that supp(/C) C 
P _1 [P(supp(/C))] fl supp(£), so we need only to prove that 
P _1 [P(supp(/C))] n supp(£) C supp(AC). Suppose that s G 
p-^plsupplfC))] nsupp(£). Then C(s) > and P(s) G 
P(supp(/C)). So there exists s' G supp(/C) such that P(s') = 
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P(s). Thus, from the assumption that K, is normal, we have 
that 

K(a) = [V- l [V{K)]nC]{s) 
= V-'[P()C)}(s)AC(s) 
= [Vp( U ')=p( s ))C(u>')]A£(s) 

> JC(s')A£(s) 

> 0, 

namely, s 6 supp(AC). Thus, P^ 1 [F(supp(/C))] fl supp(£) C 
supp(AC), finishing the proof. ■ 

Proof of Proposition [7[ For simplicity, we only prove 
the case that / has two elements. There is no difficulty to 
generalize the proof to infinite index set. Suppose that IC\ and 
K-2 are normal fuzzy languages, namely, Id = V^ 1 [P(/Q)]n£ 
for i = 1,2. To prove the normality of K,\ U /C 2 , it suffices 
to show that {K. x UlC 2 )(s) = V~ X \P(K\ U/C 2 )](s) A£(s) for 
any s G E* . By the normality of /Q, we obtain that 

£i(s) = [^ _1 [P(^)]n>c](s) 

= V- x [V{Ki)]{s) AC(s) 
= [Vp( w /) = p( s )/Ci(w')] A £(s) 
for i = 1, 2. Therefore, for any s € £* we have the following: 

(KiUlC 2 )(s) = Ki(s)yK 2 (s) 

= [(Vp (w0=PW /C 1 (o; / ))A>C(s)] V 

[(Vp( W ')=p( s )/C 2 (o/)) A £(s)] 

= [(Vp (W ')=p W x;i(w')) v 

(Vp( ta ,/)=p( s )/C2(o; / ))] A £(s) 
= [Vp ( ^) = P( s) (/Ci(w') V £3(0/))] A £(s) 

= p-^^/CiUXTaJKa) A£(s), 

i.e., (XiUA^Xs) =7 7 " 1 [^(^iU/C 2 )](s)A£(s),thus finishing 
the proof of the proposition. ■ 

Proof of Theorem^ We use the statement 3) of Proposition 
[2 to show the observability of fZ. Let s,s' G supp(/C) with 
P(s) — P(s'), and a 6 £7 C . It suffices to prove the claim that 
/C(sa) = /C(s) A £(sa) A x and /C(s'a) = /C(s') A £(s'a) A x 
have a common solution. By the definition of normality, we 
have the following: 

)C(sa) = [V- l [V{K)] n£](sa) 

= p- x [P(/C)](sa) A£(sa) 

= [Vp( W ')=p( so )£(u/)] A £(sa) 

=: A A £(sa) (write A for Vp( tl) /)=p( ao )/C(a;')) 

and 

/C(s'a) = [7> -1 [?>(£)] n£](s'a) 

= V- l [V{K)]{s'a)AC{s'a) 
= [Vp( u ')=p( s ' a )/C(w')] A £(s'a) 
= [Vp( w ')=p( sa )/C(a;')] A £(s'a) 
= AA£(s'a). 



To give a common solution x, let us consider all possible cases. 

Case 1: /C(sa) = /C(s) A £(sa) and /C(s'a) = /C(s') A 
C(s'a). In this case, the claim evidently holds by taking x = 1. 

Case 2: /C(sa) = £(s) A £(sa) and /C(s'a) < /C(s') A 
C(s'a). In this case, we first verify that /C(sa) < IC(s'a). From 
the previous arguments, we find that A A C(s'a) = JC(s'a) < 
IC(s') A £{s'a) < C(s'a). We thus get that A < C(s'a), and 
furthermore, A = K.(s'a). Note that K-(sa) = A A C(sa) < A. 
Therefore, /C(so) < /C(s'a). Taking x = IC(s'a), we see that 
the claim holds. 

Similarly, the claim holds for IC(sa) < K.(s) A £(sa) and 
K{s'a) = K{s') A£{s'a). 

Case 3: /C(sa) < /C(s) A £(sa) and /C(s'a) < /C(s') A 
C(s'a). In this case, we have that AA£(sa) = K,{sa) < lC{s)A 
£{sa) < £(sa). Consequently, A < £(sa), and thus A = 
K-(sa). In the same way, we can get that A = IC(s'a). Thus 
the claim holds by taking x = A. The proof of the theorem is 
finished. ■ 

Proof of Theorem If K is the empty fuzzy language, 
then the result is trivial. Now, let us consider the case of 
K, ^ O. Observe that K, C V~ X [P{K,)] n £, so we need only 
to prove that V~ 1 [V(lC)]r}£ C /C. It is sufficient to verify that 
[P" 1 n£](s) < /C(s) for any s E E*. By contradiction, 

assume that there exists t G E* such that [V~ 1 {V(]C)] n 
£](£) > K.(t). It is clear that t ^ e, since 1C O. Let sa be 
the shortest such i, that is, ['P _1 ['P(/C)] n£](sa) > /C(sa) but 
[^[^(/C)] n £}(uj) = K(uj) for any uj G E* with \u\ < \s\. 
Two cases need to be discussed. 

Case 1: a G £ KC . By the controllability of IC, we get that 
JC(sa) — /C(s) A £(sa). From the previous assumption, we 
obtain that 

m = ^ 1 ^(/C)]( S )A£( S ) 

= [Vp (m0= p W X;(m')] A£(s). 

Hence, we get by £(s) > £(sa) that 

JC(sa) = JC(s) A £(sa) 

= [Vp( M ') = p( s )/C(//)] A £(s) A £(sa) 
= [Vp(^) = p (s )/C(/i')] A £(sa). 

In the subcase of a G E^o, we thus have that 

[P -1 [P(X:)]nr](fla) = 7'~ 1 [P(X:)](»a) A£(sa) 

= [Vp(a,')=p( sa )/C(a;')] A £(sa) 
= [Vp( U ')=p( s )X;(w')] A £(sa) 
= AC(sa). 

This contradicts with the assumption that [P _1 [7 :, (AC)] n 
£](sa) > K,(sa). In the other subcase a G E a , we get that 
n £](sa) = [Vp ( „ 0= p (s)a /C(a;')] A £(sa). 
Therefore, the assumption [7 :>_1 ['P(/C)] n £}(sa) > 
/C(sa) implies that [Vp( w ') = p( s ) a /C(w')] A £(sa) > 
[Vpwtp ( s )/C(/u')] A £(sa), which forces that 
Vp( a ,')=p( s ) a /C(w') > yp(^)=p( s )lC{^). Whence, 
there exists cjq G E* with P(wq) = P(s)a such that 
JC(oj' ) > IC(n') for all p! G P* satisfying P(p') = P(s). 
As a result, we can write ui' Q as Wqi^Jq,, where 
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P(ui' Q1 ) — P(s) and P{lo' 02 ) = a, and furthermore, we 
see that K.(oj' 01 u)' 02 ) > ^-( w oi)- This is absurd. 

Case 2: a G E c . From the condition E c C E Q , we see 
that a G E a . Hence the assumption [P~ l [P(1C)] n £](sa) > 
)C(sa) implies that [Vp( w <) = p( s ) £(u/)] A£(sa) > JC(sa). So 
there exists a/ G P* with P(a/) = P(s)a such that /C(w') A 
C(sa) > K(sa). Since P(u>') = P(s)a, we can set u>' = 
s'au" such that P(s') = P(s) and P{w") = e. We thus see 
that JC(s'a) > K.(ui'), and moreover, IC(s'a) AC(sa) > IC(sa). 
The latter forces that both /C(s'a) > fC(sa) and £(sa) > 
IC(sa). 

Because we need Lemma ^ in the later development, 
let us pause to check its conditions. We have known that 
P(s') = P(s) and a G E c , so it remains only to show that 
s, s' G supp(/C). In fact, by the previous arguments we have 

that K(s) = [V-^ViK)] n£](s) > p> -1 [W)] n C](sa) > 
lC(sa) > 0, i.e., /C(s) > 0, and £(s') > /C(s'a) > /C(sa) > 0, 
i.e., /C(s') > 0. 

From K,(s'a) > IC(sa) and Lemma [2 we obtain that 



and 



IC(sa) = IC(s) A C(sa) 



IC(s'a) < K,(s')A£(s'a). 



(8) 



(9) 



From (8) and the proven fact C(sa) > fC(sa), we find 
that /C(s) = JC(sa) < £{sa) < £(s), i.e., JC(s) < £(s). 
Note that K.(s) = p( f _ l ')=p( s )IC(^')] A £(s), so we get that 
/C(s) = Vp( Al ') = p( s )/C(/z'). On the other hand, we see from 
/CCp- 1 [p(/C)]n£that 



£(*') 



< 



P- X [P(^)] A£](s') 
= [Vp (l y) = P( s <)£(a/)] A£(s') 
= [Vp (w0=P(s) /C(a;')] A£(s') 
< Vp( w /) = p( s )/C(w') 
= /C(s), 

i.e., /C(s') < ^C(s). Accordingly, K.(s'a) < K(s') < !C(s) = 
K-(sa), that is, /C(s'a) < JC(sa), which contradicts with the 
proven fact K,{s'a) > K,(sa). Thus the proof of the theorem 
is completed. ■ 
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